Inbound Pass through connections through the PIX

[pthang]

I am having problems allowing machines from the outside interface to pass through the system. When I set it up, then all my inside customers can not access the internet. When I allow the inside customers to access the internet, then the inbound connections fail.
Any way to have both?

 

[Bluecrack]

Need a little more info. What version of the PIX software are you running? How have you configured the PIX? Are you using NAT?

In general the following works with NAT:
1. Configure NAT to allow internal users to access the Internet.
2. Use the STATIC command to bind an external IP address to the internal IP address of the server you want Internet users to hit.
3. Define an access-list the defines what type of traffic is allowed inbound to that server (all traffic is deny by default) and then apply the access-list to the interface.

Here's a doc on Cisco's site about all this.

http://www.cisco.com/warp/public/707/28.html

Jason